Attestation Authority Connection
You can manage Attestation Authority connections in the CipherTrust Manager GUI. CipherTrust Manager uses these connections for communicating with the relevant Attestation Authority to complete the attestation process.
You can add, update, or delete these connections as per your requirement. For more information on provisioning Confidential Computing on CTE clients, see Confidential Computing.
Configure Attestation Authority Connection
Before configuring the connection, select a connection type for this connection.
To configure an Attestation Authority connection in CipherTrust Manager:
Enter the URL for the trusted attestation authority.
Enter the Base URL.
Enter the API Key.
(Optional) Use the Show API Key checkbox to show/hide the API key.
Enter the Meta information.
Select the Admin User checkbox to create a connection with administrator privileges (admin connection). By default, a connection without administrator privileges (non-admin connection) will be created.
Note
To provision Confidential Computing, you need both an admin and a non-admin connection. The admin connection is necessary to retrieve the policies from the Attestation Authority, while the details of the non-admin connection are shared with the CTE agents.
Click Next.
After configuring the connection, select the product associated to this connection.
Update Attestation Authority Connection
After the connection is created, you can update the connection details.
In CipherTrust Manager, select Access Management > Connections.
Click the three dots (...) button for the desired Attestation Authority connection.
Select View/Edit.
Update the details of the General, Connection, and Products sections as required.
Click Update.
Delete Attestation Authority Connection
To delete an Attestation Authority connection:
In CipherTrust Manager, select Access Management > Connections.
Click the three dots (...) button for the desired Attestation Authority connection.
Select Delete.
In the Delete Connection confirmation dialog, click Delete.